CVE-2016-9584
CriticalSummary
Libical allows remote attackers to cause a denial of service (use-after-free) and possibly read heap memory via a crafted ics file.
Risk Assessment
Attackers may exploit this vulnerability to disrupt system functionality and gain unauthorized access to memory data.
Recommendation
It is recommended to update libical to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in libical
See all- CVE-2016-5827High
The icaltime_from_string function in libical versions 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted string to the icalparser_parse_string function.
- CVE-2016-5826High
The parser_get_next_char function in libical versions 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) by crafting a string to the icalparser_parse_string function.
Original NVD description (English source)
libical allows remote attackers to cause a denial of service (use-after-free) and possibly read heap memory via a crafted ics file.